@oxygen-agent/cli 1.1011.98 → 1.1011.322

package/node_modules/@oxygen/cli-ugc/dist/commands.js

@@ -9,10 +9,10 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
         memberships: "Active programs this creator workspace has joined, each with your deal (posting_target), this period's progress and your published posts. Your own numbers only. Read these before choosing a program for a personal post.",
         applications: "Applications to public programs: the ones you sent as a creator, or the ones your program received as a brand.",
         profile: "Your creator profile: the topics you post about, who follows you and your LinkedIn profile URL (used when you apply), readable by the brands whose programs you joined. Name, picture and headline come from your connected LinkedIn account.",
-        posts: "Enrolled program posts: enroll existing posts, draft from a topic, edit, schedule, record creator or brand approval, and schedule one-off comments on program posts.",
+        posts: "Enrolled program posts: enroll existing posts, draft from a topic, edit, schedule, record the creator's approval (or the organizer's, if the creator delegated it), and schedule one-off comments on program posts. Brands cannot require approval of creator posts.",
         analytics: "Stored daily program and creator performance.",
         knowledge: "Master Knowledge pages shared live with a program.",
-        voice: "Creator voice profiles and imports.",
+        voice: "A program creator's voice: profile and LinkedIn history import. The workspace's own writing voice, learned from its sent messages, is `knowledge synthesize --kind voice`.",
         sponsorship: "Seat and credit sponsorship per participation.",
         amplification: "Bounded, approval-gated amplification of enrolled posts.",
         "peer-amplification": "Creator-owned consent, sender, voice, caps and immutable receipts for engaging with peer posts in one program.",
@@ -216,8 +216,8 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
             view: "calendar",
             description: "Read the program's enrolled post calendar in a bounded UTC date range (up to 42 days). Stored data only, 0 credits.",
             fields: [
-                ["date_from", "Start ISO instant, inclusive.", true],
-                ["date_to", "End ISO instant, exclusive.", true],
+                ["date_from", "Start, inclusive: an ISO instant, or YYYY-MM-DD for that day's 00:00 UTC.", true],
+                ["date_to", "End, exclusive: an ISO instant, or YYYY-MM-DD for that day's 00:00 UTC, so that day itself is left out.", true],
                 [
                     "calendar_cursor",
                     "Calendar next_cursor from the previous page.",
@@ -289,7 +289,7 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
         {
             action: "program_create",
             command: "programs create",
-            description: "Create a master UGC program from its product link. The name defaults to the site's name and its icon is fetched from the site. Free: 0 credits, no provider call.",
+            description: "Create a master UGC program from its product link; the name and icon come from the site. Creators approve their own posts; brands cannot require approval. Free: 0 credits, no provider call.",
             fields: [
                 {
                     name: "product_url",
@@ -300,13 +300,13 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
                 {
                     name: "name",
                     kind: "string",
-                    description: "Program name; defaults to the product site's name, else its domain.",
+                    description: 'The brand creators post about; invitations read "post about <name>" (e.g. Acme, not "Acme Creator Program"). Defaults to the product site\'s name, else its domain.',
                     required: false,
                 },
                 {
                     name: "brief",
                     kind: "string",
-                    description: "Short creator brief (up to 1,200 characters): what the product is, who it is for, key facts and the call to action. Drafts are grounded in it; share longer guidance as a wiki page with --knowledge-slugs.",
+                    description: "Creator brief (up to 4,000 characters): what the product is, who it is for, key facts and the call to action. Drafts are grounded in it; share longer guidance as a wiki page with --knowledge-slugs.",
                     required: false,
                 },
                 {
@@ -321,12 +321,6 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
                     description: "Selected live master wiki slugs shared with creators; empty array clears sharing.",
                     required: false,
                 },
-                {
-                    name: "brand_approval_required",
-                    kind: "boolean",
-                    description: "Require a separate brand approval before publishing.",
-                    required: false,
-                },
                 {
                     name: "posting_target",
                     kind: "posting_target",
@@ -355,7 +349,7 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
                 {
                     name: "name",
                     kind: "string",
-                    description: "Program name.",
+                    description: 'The brand creators post about; invitations read "post about <name>".',
                     required: false,
                 },
                 {
@@ -367,7 +361,7 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
                 {
                     name: "brief",
                     kind: "string",
-                    description: "Short creator brief (up to 1,200 characters); an empty string clears it.",
+                    description: "Creator brief (up to 4,000 characters); an empty string clears it.",
                     required: false,
                 },
                 {
@@ -382,12 +376,6 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
                     description: "Selected live master wiki slugs shared with creators; empty array clears sharing.",
                     required: false,
                 },
-                {
-                    name: "brand_approval_required",
-                    kind: "boolean",
-                    description: "Require a separate brand approval before publishing.",
-                    required: false,
-                },
                 {
                     name: "posting_target",
                     kind: "posting_target",
@@ -445,7 +433,7 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
         {
             action: "program_duplicate",
             command: "programs duplicate",
-            description: "Copy a program's settings, shared knowledge, brand review and posting target into a new active program. Free: 0 credits. Never copies creators, invitations, posts or sponsorship.",
+            description: "Copy a program's settings, shared knowledge and posting target into a new active program. Free: 0 credits. Never copies creators, invitations, posts or sponsorship.",
             fields: [
                 {
                     name: "program_id",
@@ -456,7 +444,7 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
                 {
                     name: "name",
                     kind: "string",
-                    description: 'Name of the copy; defaults to "<name> (copy)".',
+                    description: 'Name of the copy; defaults to the source program\'s name. Creators read it: invitations say "post about <name>".',
                     required: false,
                 },
             ],
@@ -483,7 +471,7 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
         {
             action: "invite_create",
             command: "creators invite",
-            description: "Preview an invitation email (0 credits) for one creator (--email) or up to 50 at once (--emails); send with --approved --preview-token from that preview and the same recipients. Use --link-only to create links without email.",
+            description: "Preview an invitation email (0 credits) for one creator (--email) or up to 50 at once (--emails); send with --approved --preview-token from that preview and the same recipients. Use --link-only to create links without email. Placeholder addresses (example.com, .test, .invalid) are refused on every path, --link-only included, and nothing is created. The default email names the program and carries the join link, not the brief or posting target; add those with --email-message. A refused email ends ugc_invitation_email_not_sent; the created invitation and its link are in error.details.",
             fields: [
                 {
                     name: "program_id",
@@ -558,7 +546,7 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
         {
             action: "application_decide",
             command: "creators decline",
-            description: "Decline a pending application to your program. No email is sent. Free: 0 credits.",
+            description: "Decline a pending application to your program. No email is sent, and the applicant cannot apply to this program again (you can still invite them). Free: 0 credits.",
             fixed: { decision: "decline" },
             fields: [
                 { name: "program_id", kind: "string", description: "Program ID.", required: true },
@@ -624,7 +612,7 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
         {
             action: "invite_send",
             command: "creators send-invite",
-            description: "Preview email for an existing pending invitation; send or resend with --approved --preview-token. Replaces the old link, keeps its expiry. Sent means provider accepted, not inbox delivery.",
+            description: "Preview email for an existing pending invitation; send or resend with --approved --preview-token. Replaces the old link, keeps its expiry. Sent means provider accepted, not inbox delivery. A refused email ends ugc_invitation_email_not_sent; the invitation and its link are in error.details.",
             fields: [
                 {
                     name: "program_id",
@@ -703,15 +691,15 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
                 {
                     name: "linkedin_url",
                     kind: "string",
-                    description: "Creator LinkedIn profile URL.",
-                    required: true,
+                    description: "Your LinkedIn profile URL; passing it also saves it to your profile. Omit to use the one on your profile (ugc profile get); if neither exists, ask the person rather than guess.",
+                    required: false,
                 },
             ],
         },
         {
             action: "participation_update",
             command: "creators update",
-            description: "Connect an existing LinkedIn sender, change approval authority, or leave the entire program. Revocation stops future sharing and program actions; your posts stay in your workspace and the organizer retains previously shared history. This workspace cannot currently rejoin the same program. To remove one post while staying, use ugc posts remove.",
+            description: "Connect an existing LinkedIn sender, change approval authority, or leave the entire program. Revocation stops future sharing and program actions; your posts stay in your workspace and the organizer retains previously shared history. Neither this workspace nor the same LinkedIn profile from another workspace can rejoin the same program. To remove one post while staying, use ugc posts remove.",
             fields: [
                 {
                     name: "participation_id",
@@ -879,7 +867,7 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
                 {
                     name: "approve",
                     kind: "boolean",
-                    description: "Your own post: true approves exactly what this saves, so it schedules without a separate posts approve. Signed-in creator only; brand review still applies.",
+                    description: "Your own post: true approves exactly what this saves, so it schedules without a separate posts approve. Signed-in creator only.",
                     required: false,
                 },
             ],
@@ -887,7 +875,7 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
         {
             action: "post_approve",
             command: "posts approve",
-            description: "Record creator or explicitly delegated operator approval of the current post.",
+            description: "Record the creator's approval of the current post, or the organizer's if the creator delegated it.",
             fields: [
                 {
                     name: "program_id",
@@ -921,43 +909,6 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
                 },
             ],
         },
-        {
-            action: "brand_approve",
-            command: "posts brand-approve",
-            description: "Record separate master brand approval of the current post.",
-            fields: [
-                {
-                    name: "program_id",
-                    kind: "string",
-                    description: "Program ID.",
-                    required: true,
-                },
-                {
-                    name: "post_id",
-                    kind: "string",
-                    description: "Canonical post ID.",
-                    required: true,
-                },
-                {
-                    name: "enrollment_version",
-                    kind: "number",
-                    description: "Exact enrollment version returned by posts list; always send it so brand approval binds the current enrollment.",
-                    required: true,
-                },
-                {
-                    name: "source_revision",
-                    kind: "string",
-                    description: "Exact reviewed content fingerprint returned by posts list.",
-                    required: true,
-                },
-                {
-                    name: "approved",
-                    kind: "boolean",
-                    description: "Explicit authorization of the exact preview or approval. Never inferred.",
-                    required: true,
-                },
-            ],
-        },
         {
             action: "voice_import",
             command: "voice import",
@@ -1023,7 +974,7 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
         {
             action: "sponsorship_cancel",
             command: "sponsorship cancel",
-            description: "Preview stopping renewal for one program sponsorship. Confirm with --approved and a signed-in master admin. The paid period stays; a credit sponsorship stops without a card provider call.",
+            description: "Preview stopping one program sponsorship. Confirm with --approved and a signed-in master admin. A paid sponsorship keeps its period (renewal: stops_at_paid_through); an unpaid one ends at once and its checkout closes (renewal: stops_now). A credit sponsorship stops without a card provider call.",
             fields: [
                 {
                     name: "program_id",

package/node_modules/@oxygen/shared/dist/byok-connect.d.ts

@@ -4,11 +4,13 @@
  *
  * WHY THIS EXISTS. `native_provider.execution.supports_byok` says a TOOL can run on
  * a customer's own key. It does not say the customer has any way to give us one.
- * Those are two different facts, and 9 of the 42 byok-capable native providers
+ * Those are two different facts, and 7 of the 42 byok-capable native providers
  * have the first without the second:
  *
- *   apify builtwith dropleads lusha openwebninja peopledatalabs
- *   rocketreach theirstack wiza
+ *   apify builtwith dropleads openwebninja peopledatalabs theirstack wiza
+ *
+ * (Nine until 2026-09-29, when lusha and rocketreach gained native connect forms:
+ * D57 had left them runnable only on a customer key nobody could connect.)
  *
  * For those, `oxygen integrations connect <id> --api-key` does not reach
  * `connectViaApiKey` at all. With no native catalog definition,
@@ -18,7 +20,7 @@
  * `resolveOptionalApiKeyCredentials` finds nothing and the call falls back to the
  * MANAGED key — the very key that was out of credits. The command appears to work,
  * changes nothing, and the customer is back where they started with no error. The
- * connect route now refuses each of those nine with a typed `byok_connect_unavailable`
+ * connect route now refuses each of those seven with a typed `byok_connect_unavailable`
  * rather than a silent Composio "success"; they stay OFF this list until one gains a
  * real native connect form.
  *

package/node_modules/@oxygen/shared/dist/byok-connect.js

@@ -4,11 +4,13 @@
  *
  * WHY THIS EXISTS. `native_provider.execution.supports_byok` says a TOOL can run on
  * a customer's own key. It does not say the customer has any way to give us one.
- * Those are two different facts, and 9 of the 42 byok-capable native providers
+ * Those are two different facts, and 7 of the 42 byok-capable native providers
  * have the first without the second:
  *
- *   apify builtwith dropleads lusha openwebninja peopledatalabs
- *   rocketreach theirstack wiza
+ *   apify builtwith dropleads openwebninja peopledatalabs theirstack wiza
+ *
+ * (Nine until 2026-09-29, when lusha and rocketreach gained native connect forms:
+ * D57 had left them runnable only on a customer key nobody could connect.)
  *
  * For those, `oxygen integrations connect <id> --api-key` does not reach
  * `connectViaApiKey` at all. With no native catalog definition,
@@ -18,7 +20,7 @@
  * `resolveOptionalApiKeyCredentials` finds nothing and the call falls back to the
  * MANAGED key — the very key that was out of credits. The command appears to work,
  * changes nothing, and the customer is back where they started with no error. The
- * connect route now refuses each of those nine with a typed `byok_connect_unavailable`
+ * connect route now refuses each of those seven with a typed `byok_connect_unavailable`
  * rather than a silent Composio "success"; they stay OFF this list until one gains a
  * real native connect form.
  *
@@ -63,6 +65,10 @@ export const NATIVE_API_KEY_CONNECT_INTEGRATION_IDS = new Set([
     "icypeas",
     "leadmagic",
     "linkup",
+    // lusha / rocketreach (D61, 2026-09-29): native api-key connect forms in catalog.ts,
+    // validated on each vendor's free account read. D57 left both runnable only on
+    // the workspace's own key, which nothing could store until then.
+    "lusha",
     "millionverifier",
     // Connects through saveMoltsetsConnection rather than the generic save, but that
     // service calls saveApiKeyIntegrationConnection with secretKind "api_key" like the
@@ -75,6 +81,7 @@ export const NATIVE_API_KEY_CONNECT_INTEGRATION_IDS = new Set([
     "pipedrive",
     "predictleads",
     "prospeo",
+    "rocketreach",
     "scalelist",
     // scrapeli / up2data (2026-09-25): the company-followers and LinkedIn post lanes
     // offer "Bring your own API key"; both connect forms live in catalog.ts.

package/node_modules/@oxygen/shared/dist/capability-discovery.d.ts

@@ -30,6 +30,13 @@ export type CapabilityRouteMatch = {
      * intent is that narrow; `recommendedCommands[0]` is the same command.
      */
     exactCommand?: string;
+    /**
+     * The same invocation as an MCP tool call, for a client with tools and no
+     * shell. The MCP surface serves it in place of `exactCommand`: an MCP agent
+     * handed a CLI command had to translate it, and one reported it as coming
+     * from "the docs" (blind user eval, 2026-09-29).
+     */
+    exactMcpCall?: CapabilityMcpCall;
     /**
      * The opinionated enrichment catalogue row a data-type ask resolves to
      * ("get the funding round" -> enrich_company:funding). Present only when
@@ -45,18 +52,141 @@ export type CapabilityRouteMatch = {
         tools: string[];
         commands: string[];
         exactCommand: string;
+        /** The same read as an MCP call, served on MCP in place of `exactCommand`. */
+        exactMcpCall: CapabilityMcpCall;
     };
 };
 export type PrimitiveRouteMatch = CapabilityRouteMatch & {
     card: PrimitiveRouteCard;
 };
+/** One MCP tool call with placeholder arguments, e.g. `"<sequence>"`. */
+export type CapabilityMcpCall = {
+    tool: string;
+    arguments: Record<string, unknown>;
+};
+/** Which surface reads a serialized route: the MCP one gets tool calls, not CLI commands. */
+export type CapabilityRouteSurface = "cli" | "mcp";
 export declare const OXYGEN_CAPABILITY_ROUTES: readonly CapabilityRouteCard[];
 export declare const OXYGEN_PRIMITIVE_ROUTES: readonly PrimitiveRouteCard[];
 export declare function getCapabilityRoute(id: string): CapabilityRouteCard | null;
 export declare function getCapabilityRouteMatch(id: string): CapabilityRouteMatch | null;
 export declare function inferCapabilityRoute(query: string): CapabilityRouteMatch | null;
+/**
+ * The MCP tool a catalogue row's `find` command maps to, named by its command
+ * words alone: "find company --domain <domain> --fields funding,..." once became
+ * the tool "oxygen_find_company_domain_<domain>_fields_...", which does not
+ * exist (funding, hiring-signal and revenue rows, 2026-09-29).
+ */
+export declare function catalogueFindTool(row: EnrichmentIntentTaxonomyEntry): string | null;
 export declare function inferPrimitiveRoute(query: string): PrimitiveRouteMatch | null;
-export declare function serializeCapabilityRoute(route: CapabilityRouteMatch | null): Record<string, unknown> | null;
+export declare function serializeCapabilityRoute(route: CapabilityRouteMatch | null, surface?: CapabilityRouteSurface): Record<string, unknown> | null;
+/** One schedule for every channel of a Sequence, the same as Launch's Sending schedule. */
+export declare const SEQUENCE_SENDING_SCHEDULE_COMMAND = "oxygen sequences update <sequence> --schedule-timezone <IANA zone> --schedule-days mon-fri --schedule-hours-start 09:00 --schedule-hours-end 17:00 --json";
+/** Launch's unsubscribe switch: the visible link and the one-click headers together. */
+export declare const SEQUENCE_UNSUBSCRIBE_COMMAND = "oxygen sequences update <sequence> --include-unsubscribe --json";
+/**
+ * Every exact CLI command a route hands out, as the MCP tool call that sends the
+ * same request. The MCP surface serves these in place of the command: an MCP
+ * agent handed a CLI command had to translate it (blind user eval, 2026-09-29).
+ * Each was traced to the same `/api/cli/*` request as its command; the
+ * mcp-server test proves every tool exists and declares every argument.
+ * Factories, so a caller can edit the object it gets.
+ */
+export declare const CAPABILITY_ROUTE_MCP_CALLS: {
+    connectedAppsList: () => {
+        tool: string;
+        arguments: {};
+    };
+    sequenceSendingSchedule: () => {
+        tool: string;
+        arguments: {
+            sequence: string;
+            sending_schedule: {
+                timezone: string;
+                days: number[];
+                start: string;
+                end: string;
+            };
+        };
+    };
+    sequenceUnsubscribe: () => {
+        tool: string;
+        arguments: {
+            sequence: string;
+            include_unsubscribe: boolean;
+        };
+    };
+    ugcProgramCreate: () => {
+        tool: string;
+        arguments: {
+            product_url: string;
+        };
+    };
+    publishingFirstComment: () => {
+        tool: string;
+        arguments: {
+            content_text: string;
+            publish_at: string;
+            sender_account_id: string;
+            content: {
+                first_comment: string;
+            };
+        };
+    };
+    companyUrlRecovery: () => {
+        tool: string;
+        arguments: {
+            prompt: string;
+            source_intent: string;
+        };
+    };
+    companyPageFollowers: () => {
+        tool: string;
+        arguments: {
+            action: string;
+            company_url: string;
+            records: number;
+        };
+    };
+    localBusinessScrape: () => {
+        tool: string;
+        arguments: {
+            action: string;
+            source: string;
+            filters: {
+                q: string;
+            };
+        };
+    };
+    senderConnect: () => {
+        tool: string;
+        arguments: {
+            country: string;
+        };
+    };
+    rowClassification: () => {
+        tool: string;
+        arguments: {
+            family: string;
+        };
+    };
+    linkedinKeywordPosts: () => {
+        tool: string;
+        arguments: {
+            action: string;
+            filters: {
+                keywords: string[];
+                all_keywords: string[];
+                exclude_keywords: string[];
+                ai_filter: string;
+            };
+        };
+    };
+};
+/** The catalogue row's `enrichment catalog --intent <id>` as an MCP call. */
+export declare function catalogueIntentMcpCall(intentId: string): CapabilityMcpCall;
+/** A post's first comment is set with the post; `publishing posts update` takes the same flag. */
+export declare const PUBLISHING_FIRST_COMMENT_COMMAND = "oxygen publishing posts create --publish-at <iso> --sender <sender_id> --text \"<post>\" --first-comment \"<comment, e.g. the link>\" --json";
 export declare const COMPANY_PAGE_FOLLOWERS_COMMAND = "oxygen tables followers check --company <linkedin company page URL> --records <n> --json";
 /** The exact `companies search plan` invocation for the url_recovery intent. */
 export declare const COMPANY_URL_RECOVERY_COMMAND = "oxygen companies search plan --prompt \"Find the websites for these companies: <company names>\" --source-intent url_recovery";